| Antivirus / EDR | Malware prevention, detection, quarantine, and suspicious behavior alerts. | May not produce a customer-readable risk report, evidence gap list, or tiered remediation roadmap. | Complements protection with assessment visibility and fix prioritization. |
| Free Windows security checklist | Fast review of obvious device settings. | Often lacks scoring context, customer evidence, router/network visibility, and report packaging. | Turns local evidence into a structured report with recommendations. |
| Vulnerability scanner | Known vulnerability and exposed-service discovery. | Can be too asset- or CVE-centered for non-technical buyers and may miss customer evidence context. | Adds buyer-readable posture, confidence, and remediation explanation. |
| Penetration test | Authorized active validation and exploitation paths. | Usually higher-cost, higher-risk, and not necessary for a first safety baseline. | Provides a read-only starting point before active testing is justified. |
| MSP or IT audit | Technician-led recommendations, managed IT, and implementation support. | Report depth and evidence format vary by provider and engagement. | Provides repeatable evidence-backed assessment output that can guide follow-up work. |
| SOC / SIEM / 24/7 monitoring | Continuous telemetry, alerting, and incident operations. | Can be excessive for a home or small business that first needs a baseline report. | Establishes point-in-time visibility and optional monthly local rescan context. |